Technology & Security Controls Testing Manager

Allstate•McCullom Lake, IL

7d•$110,000 - $181,025

About The Position

As a Technology & Security Controls Testing Manager, you'll lead teams of individual contributors focused on the assessment and validation of technology & security controls across our technology environment. The ideal candidate will have deep expertise in technology & cybersecurity risk management, control testing methodologies, and cybersecurity frameworks, with a strong ability to collaborate across teams and drive continuous improvement. You'll also lead teams in the development and evaluation of programs, processes and procedures to mitigate technology & cybersecurity risk, ensuring protection of company information and assets, and understanding and applying pertinent industry and government regulations, contracts and requirements.

Requirements

7 or more years of experience (Preferred)
Experience utilizing NIST & COBIT frameworks (preferred)
Controls Testing
Cybersecurity
Employee Supervision
Information Security
Leadership
NIST 800-53
NIST Standards
Problem Resolution
Risk Assessments
Risk Management
Security Controls

Responsibilities

Lead and manage the execution of control testing activities focused on technology and security controls aligned to NIST 800-53.
Develop and maintain testing methodologies, procedures, and documentation standards.
Perform control assessments, walkthroughs, and evidence reviews to evaluate design and operating effectiveness.
Collaborate with control owners, system owners, and cybersecurity teams to ensure accurate control implementation and remediation.
Provide detailed reporting on control testing results, including findings, risk ratings, and recommendations.
Track and monitor remediation efforts and validate corrective actions.
Support internal and external audits, regulatory exams, and risk assessments.
Continuously improve control testing processes and tools to enhance efficiency and effectiveness.
Stay current on regulatory changes, cybersecurity threats, and industry best practices.
Manage the evaluation and communication of guidance, interpretation and application of regulatory, contract and industry requirements for cybersecurity governance; directs partnerships with Legal and business leaders to advise course of action and develop processes for organizing and maintaining required filings and documentations
Oversee the coaching and development of subordinates on strategies for effective communication and successful interaction with technical and business peers; assists in creating plans in partnership with Learning and Development to grow and expand team technical skills in response to business needs